Senior Cloud Infrastructure Engineer

UST HealthProof, Inc.; Hyderabad; Hybrid; INR 4,000,000 - 7,000,000; Full time

Job summary

UST HealthProof, Inc. is seeking a Senior Cloud Infrastructure Engineer in Hyderabad to own design, resilience, and day-to-day health of HealthEdges infrastructure across AWS and hybrid on-prem/Azure/GCP.

The role spans migration, DR, patching, platform currency, and security/compliance controls in a large multi-account environment. Responsibilities include building IaC, managing VPCs, IAM, monitoring, and on-call ownership.

Qualifications

• 5+ years of hands-on cloud infrastructure engineering experience, with AWS and multi-cloud exposure.
• Direct experience with disaster recovery design and execution.
• Strong Infrastructure as Code experience (CDK, Terraform, or CloudFormation).
• Experience with containerized environments and Kubernetes/EKS, including version upgrade and lifecycle management.
• Linux and Windows Server administration at scale.
• Solid IAM design experience, including cross-account access and least-privilege enforcement.
• Strong scripting ability (Python, Bash, or PowerShell).
• Experience building and maintaining CI/CD pipelines.
• Comfortable being the primary on-call and L2 escalation point for infrastructure incidents.

Responsibilities

• Own infrastructure across the environments including secure configuration baselines and patch management for OS images and on-prem hardware.
• Design, build, and maintain infrastructure across AWS (primary), with supporting work in Azure and GCP, plus the on-prem estate still in active retirement.
• Build and maintain reusable, auditable Infrastructure as Code for cloud deployments, and for remaining on-prem server deployment.
• Support cloud networking execution, VPC provisioning, security group standards, and related connectivity work.
• Manage storage across cloud and legacy on-prem storage as workloads migrate; contribute to on-prem retirement and datacenter decommissioning efforts.
• Support AWS migration execution for in-flight waves, including server deployments and resource change requests via IaC.
• Own disaster recovery architecture and execution across cloud environments.
• Maintain DR solutions and backup strategy and run DR drills on a regular cadence; document gaps and drive remediation.
• Contribute to vulnerability management triage across infrastructure teams, threat detection, and infra security findings review.
• Maintain compliance controls; support HIPAA and SOC 2 audit readiness, access review and recertification, evidence collection, and change freeze coordination.

Skills

Cloud architecture

Disaster recovery

Scripting (Python/Bash/PowerShell)

IAM least-privilege

CI/CD pipelines

Infrastructure as Code

Multi-cloud tooling

On-call ownership

Tools

AWS

Terraform

CloudFormation

CDK

Kubernetes / EKS

Linux

Windows Server

Job description

Senior Cloud Infrastructure Engineer

Were looking for a Senior Cloud Infrastructure Engineer to own the design, resilience, and day-to-day health of HealthEdges infrastructure across AWS and our hybrid on-prem/Azure/GCP estate. This role sits at the intersection of cloud engineering and infrastructure engineering spanning AWS migration execution, disaster recovery, patching and platform currency, and the security/compliance controls that keep our security obligations intact. Its a hands-on senior IC role for someone who wants deep ownership of infrastructure resilience across a large, multi-account, multi-platform environment thats actively migrating off legacy on-prem infrastructure.

Areas of Responsibility:

Infrastructure and Hybrid Cloud Architecture

• Own infrastructure across the environments including secure configuration baselines and patch management for OS images and on-prem hardware
• Design, build, and maintain infrastructure across AWS (primary), with supporting work in Azure and GCP, plus the on-prem estate still in active retirement
• Build and maintain reusable, auditable Infrastructure as Code for cloud deployments, and for remaining on-prem server deployment.
• Support cloud networking execution, VPC provisioning, security group standards, and related connectivity work.
• Manage storage across cloud and legacy on-prem storage as workloads migrate; contribute to on-prem retirement and datacenter decommissioning efforts.
• Support AWS migration execution for in-flight waves, including server deployments and resource change requests via IaC.

Disaster Recovery Resilience

• Own disaster recovery architecture and execution across cloud environments.
• Maintain DR solutions and backup strategy and run DR drills on a regular cadence; document gaps and drive remediation.
• Design for resilience from the start and treat recoverability as a first-class requirement, not an afterthought.

Security, Compliance Vulnerability Management

• Contribute to vulnerability management triage across infrastructure teams, threat detection, and infra security findings review.
• Support PHI/PII classification scanning, penetration test coordination, and security exception approvals.
• Maintain compliance controls; support HIPAA and SOC 2 audit readiness, access review and recertification, evidence collection, and change freeze coordination.
• Maintain EKS container runtime security sensor coverage as part of ongoing platform hardening.

Cloud Infrastructure Operations

• Design and manage roles and cross-account access controls following least-privilege principles across multi-account, multi-cloud environments.
• Own cloud execution: load balancers, DNS (), VPC provisioning, and security group standards.
• Manage compute resources at scale with an eye toward right-sizing and long-term maintainability.
• Administer cloud storage and database services with attention to cost, performance, and resilience.
• Own infrastructure health, cost, and performance monitoring using native and third-party tooling, building the observability that lets issues surface before they become incidents.
• Administer and harden Linux and Windows Server environments across cloud and on-prem, including patching, performance tuning, troubleshooting, Active Directory integration, Group Policy, DNS, and certificate services.
• Manage hybrid identity and authentication across on-prem and cloud workloads, and maintain OS-level security baselines and hardening standards across the estate.

CI/CD, Automation Delivery

• Build and evolve CI/CD pipelines for secure, repeatable infrastructure deployments.
• Write automation to reduce manual toil and enforce operational consistency across cloud and on-prem environments.
• Take solutions from proof-of-concept to production with an eye toward long-term maintainability, not just getting it working once.

Reliability, Monitoring Incident Response

• Monitor, scale, and maintain production infrastructure with availability, performance, and security as top priorities.
• Participate in on-call rotation; serve as L2 escalation point for cross-team infrastructure support; lead root cause analysis and drive incident retrospectives to closure.
• Author and maintain runbooks that hold up under pressure, not just at handoff.

Cost Tagging Governance

• Contribute to FinOps efforts: identify and remediate cost anomalies, own tagging remediation against enterprise tagging standards, and make pragmatic cost/performance/resilience tradeoffs.

AI-Enabled Engineering

• Use AI coding assistants to accelerate IaC development, scripting, and troubleshooting.
• Use AI tooling to draft first-pass runbooks, DR documentation, and incident retrospectives to validate and refine before publishing.

Collaboration Documentation

• Document architecture, DR runbooks, and standard operating procedures others can actually follow under pressure.
• Provide technical guidance to product teams on infrastructure resilience, migration sequencing, and recovery design.

Required Qualifications

• 5+ years of hands-on cloud infrastructure engineering experience, with deep expertise in AWS and in other cloud environments.
• Direct experience with disaster recovery design and execution.
• Strong Infrastructure as Code experience (CDK, Terraform, or CloudFormation).
• Experience with containerized environments and Kubernetes/EKS, including version upgrade and lifecycle management.
• Linux and Windows Server administration experience, including patching and OS lifecycle management at scale.
• Solid IAM design experience, including cross-account access and least-privilege enforcement.
• Strong scripting ability (Python, Bash, or PowerShell).
• Experience building and maintaining CI/CD pipelines.
• Comfortable being the primary on-call and L2 escalation point for infrastructure incidents.

Preferred Qualifications

• Experience operating in regulated environments (FedRAMP, HIPAA, SOC 2) and understanding of what that means for infrastructure and DR design specifically.
• AWS certification (Solutions Architect or SysOps, Associate or Professional).
• Experience with hybrid infrastructure, bridging on-prem virtualization with cloud-native services during active migration.
• Familiarity with DISA STIG or CIS benchmark hardening, and vulnerability management/triage workflows.
• FinOps or cost governance experience, including tagging standards enforcement.
• Healthcare technology or digital health platform background.
• Experience with AI-assisted engineering workflows as part of daily practice.

Behaviors Traits

• Raises risk early rather than waiting for it to become an incident.
• Comfortable with ambiguity in a large, multi-account, evolving cloud environment.
• Strong sense of ownership; closes gaps rather than escalating and waiting.
• Communicates technical tradeoffs clearly to both engineers and non-technical stakeholders.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.